Adds Kerberos authentication to winrm if available

If the `kerberos` module is available, winrm will attempt to establish a
Kerberized connection to a Windows server. This allows use of Windows
domain accounts, which are quite often the only kinds of accounts
enabled on enterprise networks.

This also pulls the `transport_schemes` variable up into the
`winrm.Connection` class. This lets tests or future modifications alter
the list of available schemas without reaching into
`Connection.__init__`.

empty

Listify revert errorhandling

Fixes #9704

Fixes #9663

Fixes #9699

Superceeds e61e8a37

Fixes #9684

Fixes #9669

Fixes #9667

fixes to template function

Expand playbook_dir in time for loading tasks

Fixes #9618

- make sure it calls itself correctly, now passes same params as it recieves
- vars is reserved, changed for templatevars to avoid confustion
- forcing mustaches again since the removal broke 'listification' as per #9622
- fixes incorrectly successful tests using undefined var, now it is defined
- now returns empty list if items is None to avoid errors

fixes

fixes powershell upgrade script to work on different System architectures.